Open to an internship · Penetration Testing first · SOC second
Mikołaj Kołodziej
Cybersecurity student (CBE) · Wrocław University of Science and Technology. Penetration testing internship candidate with hands-on web vulnerability research and a 4.62 GPA.
- Goal
- Penetration Testing internship · SOC secondary
- Focus
- Web vuln research · networking · reporting
- Location
- Wrocław — flexible work model
- Availability
- Open · timing flexible
visitor@cv: ~/cv
cv-shell 1.0 (static build) — professional summary
Type "help" to list the available commands, or "whoami" to start.
↑/↓ history · Tab completion · Enter run · Ctrl+L clear
The terminal is fully interactive — history, Tab completion and filters included.
Record at a glance
01 Profile
Profile & how I work
Penetration testing internship candidate with hands-on web vulnerability research and a 4.62 GPA.
Cybersecurity student on the CBE of IT systems track at Wrocław University of Science and Technology (engineer programme, expected graduation February 2028). I focus on web application security and WordPress plugin research: mapping attack surface in a lab, confirming issues safely, and writing clear reports for vendors.
Alongside studies I have documented coordinated findings — including a reserved CVE pending its public reference — and I keep networking foundations sharp through completed CCNA coursework. I am looking for a penetration testing internship first, with SOC as a strong secondary interest; I do not position myself as a software developer.
- Technical writing and structured reporting (Controltec + disclosure reports)
- Working independently on lab research with clear written outcomes
- Communicating findings so a developer can act without guessing
- Ethical testing only in authorised or self-hosted lab scope
02 Disclosures
Latest disclosures
Coordinated, documented and exportable as a CVE 5.0 record.
- Records
- 4
- CVE records
- 1
- Fixed
- 0 /4
- Average CVSS
- 8.8
- Critical RESERVED DisclosedCVE-2026-30764
Authentication bypass in admin account creation (/admin/functions/new_admin.php)
Obed Nyakundi · Rental House Management System · Web application
CVSS
9.8
- Critical No CVE ReportedNo CVE
Unauthenticated blind SQL injection and missing authorization on order-update REST route
Advatix · FEP API Connection · WordPress plugin
CVSS
9.1
- High No CVE ReportedNo CVE
Authenticated arbitrary file read and configuration disclosure via CSRF middleware bypass
WPIDE · WPIDE — File Manager & Code Editor · WordPress plugin
CVSS
6.5
03 — Contact
Looking for a penetration testing internship (SOC secondary)
I can walk you through any report, the lab methodology behind it, and how I document findings for vendors.
Open to internship opportunities — timing flexible
I reply fastest by email. Happy to walk through any report, the methodology, or how I document findings.
Disclosure policy & safe harbor →